An RPKI-valid BGP hijack enabled fraudulent TLS issuance and a malicious update. Tight ROAs matter, especially when distributing security software like CSF. https://github.com/Black-HOST/csf People trust us. That trust shouldn't be rerouted. 🛡️ https://blog.apnic.net/2026/09/22/latest-bgp-hijack-targets-hosting-software-vendor/